Restrict Logon to specific times

J

johnb

Does Windows XP have a feature that allows the systems
administrator to restrict logon times by user account?
I'd like to limit certain accounts by time (i.e. USERA
can logon between 07:00 and 08:00 M through F).
 
D

Doug Knox MS-MVP

See www.dougknox.com, Win XP Tips, How to Restict a User's Logon Hours.

Note: Outside of a domain environment, this will not force the user to log
off when their hours expire. To accomplish this, you would need 3rd party
software.
 
T

Torgeir Bakken (MVP)

Doug said:
See www.dougknox.com, Win XP Tips, How to Restict a User's Logon Hours.

Note: Outside of a domain environment, this will not force the user to log
off when their hours expire.

Hi

As far as I know, even inside a domain environment, that will not log users off
from their local machine - only from network resources.
 
D

Doug Knox MS-MVP

You may be correct, Torgeir, but that's not the way I've read it.
Unfortuntely, I'm not in a domain environment, so can't test it.
 
T

Torgeir Bakken (MVP)

Doug said:
You may be correct, Torgeir, but that's not the way I've read it.
Unfortuntely, I'm not in a domain environment, so can't test it.

Hi

If you are thinking about the GPO setting "Network security: Force logoff when
logon hours expire", that has nothing to do with a logoff of the user at his
local computer, this setting affects only the Server Message Block (SMB)
component of the server, to remove ("logoff") connections that the user has on
the server.

More here:

http://groups.google.com/groups?hl=...threadm=#xEYA#[email protected]

http://groups.google.com/groups?selm=#[email protected]

http://groups.google.com/[email protected]

http://groups.google.com/[email protected]

http://groups.google.com/groups?hl=...threadm=u7BbSJV#[email protected]
 
D

Doug Knox MS-MVP

Well, what I do know, Torgeir, is that if you set the restrictions on an XP
Pro or Home system, even in a workgroup or stand alone setting, it will
prevent them from logging on, even locally, outside of their assigned hours.
It would make sense that it would force them to log off, as well.
 
T

Torgeir Bakken (MVP)

Doug said:
Well, what I do know, Torgeir, is that if you set the restrictions on an XP
Pro or Home system, even in a workgroup or stand alone setting, it will
prevent them from logging on, even locally, outside of their assigned hours.
It would make sense that it would force them to log off, as well.

Yes, that would make sense, but sadly that is not the way it is implemented...
 
D

Doug Knox MS-MVP

I'll take your word for it, for now, Torgeir. But as soon as I can get a
domain controller setup, I'll be trying it :)
 
P

Paul Adare

microsoft.public.windowsxp.security_admin news group, Doug Knox MS-MVP
I'll take your word for it, for now, Torgeir. But as soon as I can get a
domain controller setup, I'll be trying it :)

Torgeir is correct. All that happens is that network connections get
closed, the user is not logged out of the computer or computer that they
are currently logged into.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top